Open Information Security Foundation

02/02/2016

05:51 AM Suricata Bug #1656: several silent bypasses at the HTTP application level (chunking, compression, HTTP 0.9...)

Victor Julien wrote:
> So we need to treat as chunked in that case, but somehow handle the non-chunked case as well.... Steffen Ullrich

02/01/2016

09:11 AM Suricata Bug #1656: several silent bypasses at the HTTP application level (chunking, compression, HTTP 0.9...)

Victor Julien wrote:
> I'm looking at the case of HTTP/1.0 response, TE header chunked, non-chunked body (stream 44 ... Steffen Ullrich

01/04/2016

08:28 AM Suricata Bug #1656: several silent bypasses at the HTTP application level (chunking, compression, HTTP 0.9...)

> The libhtp warnings are generally accessible by enabling the http-events.rules file we ship. Did you have this en... Steffen Ullrich

01/02/2016

03:52 PM Suricata Bug #1656 (Closed): several silent bypasses at the HTTP application level (chunking, compression, HTTP 0.9...)

I'm the author of the HTTP evader test suite which implements various ways to bypass IDS and IPS at the HTTP applicat... Steffen Ullrich